Reduce benign warning noise in smoke checks

docker-compose.yml

@@ -196,7 +196,8 @@ services:
       TEMPERATUREUNIT: f
       WEBTHEME: lcars
       WEBPASSWORD_FILE: /run/secrets/PIHOLE_WEBPASSWORD
-      FTLCONF_dns_upstreams: coredns
+      # Pin upstream to IPv4 CoreDNS to avoid noisy IPv6 recursion-refused warnings.
+      FTLCONF_dns_upstreams: 10.5.0.4#53
       FTLCONF_database_network_parseARPcache: 'false'
     secrets:
       - PIHOLE_WEBPASSWORD

scripts/smoke-test.sh

@@ -40,7 +40,29 @@ done
 echo "[smoke] key error scan"
 for c in "${services[@]}"; do
   echo "=== $c ==="
-  docker logs --tail 120 "$c" 2>&1 | grep -Ei "error|failed|not found|panic|traceback|unhealthy|refused|parse" | tail -n 20 || echo "(no matching patterns)"
+  case "$c" in
+    darkscale)
+      docker logs --tail 120 "$c" 2>&1 \
+        | grep -Ei "error|failed|not found|panic|traceback|unhealthy|refused|parse" \
+        | grep -Ev "tpmrm0|Tailscale is stopped" \
+        | tail -n 20 || echo "(no matching patterns)"
+      ;;
+    darkpihole)
+      docker logs --tail 120 "$c" 2>&1 \
+        | grep -Ei "error|failed|not found|panic|traceback|unhealthy|refused|parse" \
+        | grep -Ev "refused to do a recursive query" \
+        | tail -n 20 || echo "(no matching patterns)"
+      ;;
+    darki2p)
+      docker logs --tail 120 "$c" 2>&1 \
+        | grep -Ei "error|failed|not found|panic|traceback|unhealthy|refused|parse" \
+        | grep -Ev "SessionCreated read error: End of file|Connect error Operation canceled|Connect error Network is unreachable|RouterInfo for .* not found|RouterInfo not found, failed to send messages|NetDbReq: .* not found after 5 attempts" \
+        | tail -n 20 || echo "(no matching patterns)"
+      ;;
+    *)
+      docker logs --tail 120 "$c" 2>&1 | grep -Ei "error|failed|not found|panic|traceback|unhealthy|refused|parse" | tail -n 20 || echo "(no matching patterns)"
+      ;;
+  esac
   echo
 done
 

tailscale/post-rules.sh

@@ -2,7 +2,7 @@
 set -e
 
 # Start Tailscale in background
-/usr/local/bin/tailscaled --tun=userspace-networking &
+/usr/local/bin/tailscaled --tun=userspace-networking --encrypt-state=false --hardware-attestation=false &
 TAILSCALED_PID=$!
 
 # Wait for Tailscale to initialize